PT-2023-31613 · Efacec · Bcu 500 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows an attacker to send custom requests to cause a denial-of-service condition on the device through the exploitation of active user...

PT-2023-32832

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description This issue allows writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process. Recommendations At the...

PT-2023-35649 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue was identified, potentially causing a crash. The crash occurs in the ih264d format convert function, which is called by isvc...

PT-2023-9344 · Unknown · Tinode Chat

Name of the Vulnerable Software and Affected Versions: Tinode Chat affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Tinode Chat, allowing a remote attacker to conduct cross-site scripting attacks by injecting specially crafte...

PT-2023-31564

Name of the Vulnerable Software and Affected Versions femanager Extension for TYPO3 affected versions not specified Description A security bypass issue has been identified in the femanager Extension for TYPO3. Recommendations At the moment, there is no information about a newer version that...

PT-2023-35636 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state includes functions such as ih264d...

PT-2023-29874 · Plcnext · Plcnext

Name of the Vulnerable Software and Affected Versions: PLCnext products affected versions not specified Description: A download of code without integrity check issue in PLCnext products allows a remote attacker with low privileges to compromise integrity on the affected engineering station and th...

PT-2023-27580 · Joomla · Clicky Analytics Dashboard

Name of the Vulnerable Software and Affected Versions: Clicky Analytics Dashboard module for Joomla affected versions not specified Description: A reflected XSS vulnerability was discovered in the Clicky Analytics Dashboard module for Joomla. Recommendations: At the moment, there is no informatio...

PT-2023-32763 · Thecosy · Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS versions up to 2.0.1 Description: A critical vulnerability was found in Thecosy IceCMS, allowing remote attackers to manage user sessions. The manipulation affects unknown code and can be initiated remotely. The exploit has bee...

PT-2023-36078 · Repox · Repox

Name of the Vulnerable Software and Affected Versions: Repox affected versions not specified Description: An authentication bypass issue has been found, allowing a remote user to send a specially crafted POST request to alter or create users due to the lack of any authentication method...

PT-2023-7679 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Bluetooth Driver, which can be exploited by a remote attacker to execute arbitrary code. This can affec...

PT-2023-7675 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows kernel, which can be exploited by an attacker to cause a denial of service using a specially crafted malicious file. Thi...

PT-2023-7710 · Microsoft · Dynamics 365 For Finance/Operations

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 Finance and Operations affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Dynamics 365 for Finance and Operations, which can be exploited by a remote attacker...

PT-2023-7722 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This...

PT-2023-7866 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-8027 · Microsoft · Azure Connected Machine Agent

Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to insufficient access control in the Azure Connected Machine Agent, which can be exploited to elevate privileges. Recommendations: At the moment,...

PT-2023-7618 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Connection Sharing ICS function of the Windows operating system. This allows a remote attacker to execute arbitrary cod...

PT-2023-28368 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions 9820 through 1380 Description: A TOCTOU race condition can cause unexpected termination of a system. Recommendations: For Samsung Mobile Processor Exynos versions 9820 through 1380, at the moment, ther...

PT-2023-35632 · Git +1 · Selinux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state includes is decl requires met, enable avrules, and link modules. No informatio...

PT-2023-35630 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read 8 crash has been reported. The crash state includes dwg free object, dwg free, and llvmfuzz.c. Recommendations: At the moment...